Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
File:                     3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (raw, json)
Hash identifier:          R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=
Subject key identifier:   9A:59:2F:62:D4:2D:2C:AF:60:DB:4A:CE:54:20:5D:5C:0E:E7:1F:5A
Certificate issuer:       /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial:       31B4801A6DBB42535800BD4BA9A42522F3132EBC
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa
Signing time:             Sun 03 May 2026 02:57:06 +0000
ROA not before:           Sun 03 May 2026 02:52:06 +0000
ROA not after:            Sun 02 May 2027 02:57:06 +0000
asID:                     149692
IP address blocks:        103.186.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
                          rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:80:1a:6d:bb:42:53:58:00:bd:4b:a9:a4:25:22:f3:13:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
        Validity
            Not Before: May  3 02:52:06 2026 GMT
            Not After : May  2 02:57:06 2027 GMT
        Subject: CN=9A592F62D42D2CAF60DB4ACE54205D5C0EE71F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:d1:be:cf:9c:49:92:66:fb:a4:6f:d6:00:
                    92:a2:d1:f0:3c:bb:d4:16:19:bf:79:d7:92:4c:56:
                    25:81:8d:33:d8:3d:73:88:8b:61:b1:c7:50:7d:c5:
                    e3:e1:a4:38:02:c1:dc:b9:5f:51:a8:88:b7:73:5f:
                    16:e0:24:1a:d6:05:e3:3e:90:77:87:55:c0:25:dc:
                    b5:9a:44:96:a9:e1:55:75:c7:9f:17:d0:70:41:df:
                    51:3e:c2:ec:26:c0:0f:45:41:dc:c3:25:f4:6a:5e:
                    6d:03:ae:20:bd:1c:8e:a3:53:9b:75:6c:62:44:cc:
                    6f:f0:63:10:b3:70:63:8e:fa:ed:d8:6c:6e:fa:89:
                    31:80:47:d8:7e:d6:a9:65:28:ad:89:5b:d1:ca:ba:
                    e5:ca:c1:21:b0:77:1f:46:b5:3a:a5:5f:2e:e1:da:
                    01:c5:41:a1:e3:93:ea:35:92:71:10:bf:95:32:fa:
                    5b:87:a3:c6:1a:51:c3:ba:3f:94:f6:5a:6e:a5:81:
                    47:12:ac:02:d2:53:11:83:8f:bc:35:d1:b3:ea:c5:
                    a3:fc:f1:02:79:e4:d0:5f:f4:b5:ad:7d:21:f1:c7:
                    75:1c:15:2b:be:d8:49:b1:db:82:c7:6d:06:0c:46:
                    18:a5:6a:a0:ca:4e:0b:d3:20:32:a3:73:53:44:4c:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:2F:62:D4:2D:2C:AF:60:DB:4A:CE:54:20:5D:5C:0E:E7:1F:5A
            X509v3 Authority Key Identifier:
                keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:51:33:73:66:b5:4e:a5:41:a4:c1:a5:66:a8:67:b0:50:13:
         45:3b:58:10:d9:bd:54:41:12:b0:74:bd:67:75:a9:8d:50:de:
         64:20:08:9b:9f:37:3a:2b:ca:36:47:87:34:b7:e8:15:5a:c5:
         b3:49:e5:aa:4f:b4:93:3a:ce:ff:0a:e5:bb:44:bc:ec:b2:9e:
         85:db:c7:da:65:c6:5d:34:8d:c5:e5:3f:65:a7:e0:55:86:cb:
         80:6e:cf:89:d5:fd:d7:a4:80:60:12:2e:42:4a:31:0e:5d:f9:
         ee:6f:5c:ab:ec:8c:90:61:62:17:3f:08:0a:31:4f:6a:8f:31:
         73:d0:ad:de:a5:d8:5c:9f:7b:2f:b9:41:c4:e0:fa:c1:ce:04:
         3f:d0:70:4d:5d:fb:9b:de:f1:6f:46:3d:0e:e3:84:36:c8:86:
         29:22:c3:aa:c4:66:1a:36:f7:27:74:64:cd:43:86:4f:05:e2:
         c6:7f:aa:b8:a8:9e:26:e3:ad:a2:da:40:4f:71:81:81:21:48:
         8f:29:6d:b8:78:de:10:95:36:e3:b3:b2:83:51:b3:88:f7:02:
         db:a4:ea:1e:e3:09:e7:fd:64:c9:b6:64:fe:87:1b:0d:ca:d6:
         15:d0:93:91:4f:09:c8:37:45:c9:7f:18:09:2a:53:a4:9e:c1:
         94:f6:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:05 2026 by rpki-client